Description

This detector identifies exposed Spring Boot Actuator endpoints that leak sensitive technical information about the application. When these management endpoints are accessible without proper authentication, they can reveal system details, configuration data, and internal application state that attackers can use for reconnaissance and targeted attacks.

Detection Strategy

• Makes HTTP requests to common Spring Boot Actuator endpoint paths (like /actuator/health, /actuator/info, /actuator/env, etc.)

• Analyzes HTTP responses from these endpoints to detect if they return technical information

• Reports a vulnerability when actuator endpoints are accessible and expose sensitive system or application details

• Uses multi-threading to efficiently check multiple actuator endpoints simultaneously